$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa File: b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa (raw, json) Hash identifier: mT0PrJnzLzS4E5nbVejrBpMsXrvMwnkFlAll9dG+QsE= Subject key identifier: 17:92:37:AD:78:5D:BD:D9:BC:AB:03:D6:45:2D:8E:00:E4:8A:79:F3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB4EC66BB6BD1E670A4DE7880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 7029 IP address blocks: 69.66.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:66:bb:6b:d1:e6:70:a4:de:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=c4e14f0e-4673-41ca-8ca2-10410ab2f661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:41:d3:36:e1:c5:b1:57:15:cc:f0:bb:d6:fe: d6:61:f0:bf:de:26:b3:a7:63:2b:35:b7:7f:1e:58: 40:66:f2:0d:c1:c1:7f:de:cc:e3:a2:d9:54:57:33: f4:0e:65:0e:41:61:6c:78:c1:7a:d8:0d:4a:7b:c8: 43:98:e7:22:20:e6:34:ab:b9:6f:b2:cb:26:3c:34: 60:70:e5:ad:02:fd:24:62:89:27:81:85:32:76:95: db:85:6f:4d:89:fb:e6:2f:8a:a6:a1:ed:9a:9f:d9: 43:4e:f8:81:3e:4e:fa:e7:ff:73:9c:d1:7c:8a:03: af:b3:7d:cd:9e:90:86:d9:8a:46:1d:d1:0b:32:81: 06:60:f9:e7:68:45:e2:8f:52:5c:a9:ca:9b:d8:04: 06:ad:57:74:d0:58:ae:5f:82:1b:65:63:2a:20:84: d0:e5:64:a2:bd:09:4b:0b:3e:18:94:9d:c0:47:df: 83:0a:b7:1e:2d:c1:1c:c0:ff:ac:32:9a:b1:42:f7: 33:8d:55:92:44:42:17:8a:25:69:03:e3:c3:b0:3a: a4:05:cb:c4:4d:b0:7a:3f:b0:82:09:9c:e0:d9:18: 03:e3:c0:d8:bf:8e:80:4d:3d:cf:ce:c8:50:4d:5a: 24:3c:e4:30:5d:e6:66:82:86:d5:e9:a0:c0:dd:e9: e9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:92:37:AD:78:5D:BD:D9:BC:AB:03:D6:45:2D:8E:00:E4:8A:79:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:79:e7:53:e7:6d:4b:34:78:2a:78:28:90:12:e4:39:ae:78: 65:0e:aa:bb:ec:03:43:f0:be:1d:db:de:ac:4e:20:b1:4a:c2: 96:48:50:82:92:ec:ef:8c:9c:c2:41:7b:4c:c0:3d:d6:9a:69: b3:6d:f6:07:b8:12:35:2b:5f:1c:80:c8:02:c1:1c:89:a6:70: 7f:f4:69:44:99:77:cb:f8:3c:ba:58:03:ea:62:0b:6a:be:24: 64:94:01:39:1c:40:65:00:b5:a3:ec:09:70:03:14:89:16:d8: 32:d4:f9:9e:a0:45:cb:fb:de:92:0d:ac:e7:f5:8b:f8:c1:5e: 39:a2:c7:15:89:c7:1a:44:92:34:4b:d7:a0:56:4e:27:be:e4: 76:cd:4e:1e:de:c3:40:36:02:25:de:7f:c2:95:8e:9e:de:c1: a9:15:eb:2e:cb:6a:2c:c2:94:43:76:5a:71:3b:85:14:0a:c4: 3a:d1:74:e6:44:d0:69:70:f6:78:f5:a1:99:7b:34:f7:78:86: ed:ce:1f:15:bd:27:b5:36:94:58:81:fd:ea:9e:c4:d3:5a:9a: 61:c2:8c:1a:93:fc:b7:be:82:7e:91:cb:16:c8:23:5f:53:93: 48:2d:15:e1:cb:48:31:14:de:77:79:bc:05:fb:7e:0f:2e:c9: a3:c3:59:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07Ga7a9HmcKTeeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YzRlMTRmMGUtNDY3My00MWNhLThjYTItMTA0MTBhYjJmNjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0HTNuHFsVcVzPC71v7WYfC/3iazp2MrNbd/ HlhAZvINwcF/3szjotlUVzP0DmUOQWFseMF62A1Ke8hDmOciIOY0q7lvsssmPDRg cOWtAv0kYokngYUydpXbhW9NifvmL4qmoe2an9lDTviBPk765/9znNF8igOvs33N npCG2YpGHdELMoEGYPnnaEXij1Jcqcqb2AQGrVd00FiuX4IbZWMqIITQ5WSivQlL Cz4YlJ3AR9+DCrceLcEcwP+sMpqxQvczjVWSREIXiiVpA+PDsDqkBcvETbB6P7CC CZzg2RgD48DYv46ATT3PzshQTVokPOQwXeZmgobV6aDA3enp9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeSN614Xb3ZvKsD1kUtjgDkinnzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjE2Nzk5ZWYtMTVmOC0z ZTJiLTlhZDItOGEwNjdlMTc2ZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRULwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5551PnbUs0eCp4KJAS5DmueGUOqrvsA0Pwvh3b3qxOILFKwpZIUIKS 7O+MnMJBe0zAPdaaabNt9ge4EjUrXxyAyALBHImmcH/0aUSZd8v4PLpYA+piC2q+ JGSUATkcQGUAtaPsCXADFIkW2DLU+Z6gRcv73pINrOf1i/jBXjmixxWJxxpEkjRL 16BWTie+5HbNTh7ew0A2AiXef8KVjp7ewakV6y7LaizClEN2WnE7hRQKxDrRdOZE 0Glw9nj1oZl7NPd4hu3OHxW9J7U2lFiB/eqexNNammHCjBqT/Le+gn6RyxbII19T k0gtFeHLSDEU3nd5vAX7fg8uyaPDWQY= -----END CERTIFICATE-----Generated at Wed Aug 6 12:40:07 2025 by rpki-client